CWE-770

High likelihood

Allocation of Resources Without Limits or Throttling

Parent: CWE-400 - Uncontrolled Resource Consumption

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

1,858 vulnerabilities with CWE-770
CVE-2026-48854 HIGH
Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc
CVE-2026-48853 CRITICAL
Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc
CVE-2026-8683 MEDIUM
Overly long URLs crash the Mattermost Desktop App
CVSS 6.5
CVE-2026-53522 MEDIUM
Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS
CVSS 6.5
CVE-2026-50560 MEDIUM
Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature
CVSS 5.3
CVE-2026-50011 HIGH
Netty has unbounded pre-allocation in RedisArrayAggregator from RESP array length
CVSS 7.5
CVE-2026-48748 HIGH
Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion
CVSS 7.5
CVE-2026-46340 HIGH
Netty: SCTP reassembly nests buffers without bound
CVSS 7.5
CVE-2026-45416 HIGH
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
CVSS 7.5
CVE-2026-49347 MEDIUM
Quest Bot: Ticket creation has no per-user open-ticket limit or cooldown
CVE-2026-53781 MEDIUM
Summarize < 0.17.0 Disk Exhaustion via Uncapped Media Download
CVSS 4.3
CVE-2026-45802 MEDIUM
FPDI: Memory Exhaustion and Endless Loop in FPDI leads to Denial of Service
CVE-2026-44488 HIGH
Axios: Allocation of Resources Without Limits or Throttling in axios
CVSS 7.5
CVE-2026-7250 HIGH
Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5
CVE-2026-53423 MEDIUM
Unauthenticated denial-of-service via BEAM atom table exhaustion in membrane_mp4_plugin
CVE-2026-1500 MEDIUM
Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5
CVE-2026-53460 HIGH
ImageMagick: Policy Bypass can trigger out-of-Memory condition
CVSS 7.5
CVE-2026-46702 HIGH
Russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets
CVSS 7.5
CVE-2026-46673 HIGH
Russh < 0.60.3 CryptoVec - Unbounded Allocation Resource Exhaustion
CVSS 7.5
CVE-2026-45031 MEDIUM
ImageMagick: Policy Bypass in PSD decoder
CVSS 5.3
CVE-2026-10740 MEDIUM
Excessive memory allocation in s2n-quic
CVSS 5.3
CVE-2026-24720 MEDIUM
QNAP File Station 5 < 5.5.6.5243 - Resource Exhaustion
CVSS 6.5
CVE-2026-41726 MEDIUM
In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header
CVSS 6.5
CVE-2026-41716 HIGH
Spring Data web support unbounded negative-result cache keyed on attacker-supplied property names
CVSS 7.5
CVE-2026-28237 MEDIUM
Amd µProf - Allocation of Resources Without Limits or Throttling
Details
Vulnerabilities 1,858
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits